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This paper presents the development of sun safe controllers which are designed to keep 
the spacecraft power positive and thermally balanced in the event an anomaly is detected. 
Employed by NASA’s Lunar Atmosphere and Dust Environment Explorer (LADEE), the 
controllers utilize the measured sun vector and the spacecraft body rates for feedback 
control. To improve the accuracy of sun vector estimation, the least square minimization 
approach is applied to process the sensor data, which is proven to be effective and accurate. 

To validate the controllers, the LADEE spacecraft model engaging the sun safe mode was 
first simulated and then compared with the actual LADEE orbital flight data. The results 
demonstrated the applicability of the proposed sun safe controllers. 

I. Introduction 

The Lunar Atmosphere and Dust Environment Explorer (LADEE) was a NASA robotic science mission 
designed to study the lunar atmosphere and dust environment from a low lunar orbit. LADEE, headed 
by NASA Ames Research Center in partner with NASA Goddard Space Flight Center, was launched on 
September 7, 2013 UTC, and ended its mission on April 18, 2014. Designed as a small and relatively 
low cost mission, LADEE carried four instrument payloads: a neutral mass spectrometer, an ultraviolet 
spectrometer, a dust collector, and a lunar laser communication technology demonstration. 1 

An essential part of a spacecraft’s attitude determination and control systems (ADCS) is a simple and 
reliable sun safe controller that the ADCS can fall back on if the spacecraft experiences any problems. Many 
safe mode control systems for larger missions, such as those implemented on the Hubble Space Telescope 2 and 
the Solar Dynamics Observatory (SDO), 3 feature a fully redundant set of sensors. However, since LADEE 
was a low budget enhanced class D mission, complete redundancy was neither required nor affordable. 
Therefore, it was critical that LADEE’s sun safe mode be robustly designed and utilize reliable sensors and 
actuators. Similar to the hardware used in the SDO sun acquisition mode, 4 the LADEE ADCS hardware 
included: Twelve coarse sun sensors, four single axis MEMS rate gyros, and a set of four reaction wheels. 
Additional sensors were included on the spacecraft for finer attitude control, however they were not required 
to be included in the sun safe control design. 

The LADEE sun safe mode was required to ensure that the spacecraft remained power positive, thermally 
safe, and payload instrument safe. To accomplish these goals, three different states of sun safe situation 
were considered: initial (instrument) safing state, controlled roll-yaw state, and eclipse state. To design 
an effective controller for each sun safe state, we must take consideration of the following specifications. 
First, the LADEE spacecraft has solar arrays wrapped octagonally about the Z-axis, meaning it is nearly 
axisymmetric about the X- and E-axis, with the peak power position being a cone at a 10° inclination off of 
the XE-plane. Second, in order to meet the thermal safety requirement, the spacecraft must spin about the 
body Z-axis at a specified rate, thereby illuminating all faces of the spacecraft with equal amounts of sunlight. 
Finally, an effective design would mitigate spacecraft momentum accumulation due to the disturbance effect 
from the lunar gravity gradient. Therefore, the LADEE sun safe controller was designed to address these 
requirements. 
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To protect a sun sensitive instrument upon entering safe mode, the initial safing state is to maneuver 
the spacecraft so that the instrument is immediately turned away from the sun. After achieving this, 
the spacecraft would then transition into the controlled roll-yaw state by slowly spinning about Z-axis for 
thermal regulation while also rotating about the sun vector for momentum management. Figure 1 depicts 
this controlled roll-yaw motion. The rotation about the sun vector would minimize the total momentum 
build-up in lunar orbit by allowing the external torques to act in opposite directions on the spacecraft over 
time. Finally, the eclipse state would be engaged if the sun was blocked by another body, with the objective 
of minimizing the control effort by not holding any specific attitude against external torques. 

Except during the eclipse state, measurements from sun sensors are crucial throughout the safe mode. 
In this paper, a process which utilizes the least square minimization technique is adopted in determining the 
sun vector from the sensor measurements. This approach is proven to be effective and accurate. The reaction 
wheels used for the attitude maneuvers are light weight, yet generate sufficient torque for attitude control. 
They are placed in a four-sided pyramid configuration, which allows varying torques to be distributed among 
body axes. The spacecraft spin rates are measured through MEMS rate gyros, which are embedded in each 
reaction wheel and measuring rates along the wheel’s spin axis. A process is presented to convert measured 
rates into spacecraft inertial spin rates. 

The spacecraft attitude determination and control problem has been studied quite extensively in the past, 
especially with quaternion feedback, see for example, 5,6 and the references therein. However, the controllers 
presented in these works tend to be either model dependent or utilizing scalar gains, which may not be 
desirable in actual implementation. The mass and inertia properties of LADEE were such that different 
control gains for each body axis were required. In this paper, the stabilizing controllers are outlined for 
LADEE’s sun safe states, and they are not quaternion based. Instead, a sequential feedback loop closure 
approach is presented, in which a measured sun vector relative to the spacecraft body-fixed frame is used as 
the outer- loop ’’attitude” feedback, in addition to the usual inner-loop rate feedback. It is worth noting that 
LADEE’s safe mode controllers do not intend to control the complete spacecraft attitude, as its attitude 
about the sun vector is unknown. Such designs are sometimes referred to as a “two- and- a- half- degree- of- 
freedom” controllers. 4 

This paper is organized as follows. In Section II, the background and implementation of coarse sun 
sensors are discussed, and the least square estimation of the sun vector is presented. Section III describes 
the reaction wheel dynamics, and Section IV discusses the MEMS rate sensors and presents the process to 
derive spacecraft spin rates. Section V contains the derivation of overall spacecraft system dynamics, and for 
these dynamics a set of sun safe mode controllers are outlined in Section VI. Section VII contains simulation 
results, and Section VIII presents the LADEE flight data that validates the design. Finally, the paper ends 
with some conclusions. 


Sun Vector 
Rotation 



Figure 1. Controlled Roll- Yaw Motion in view of Sun 
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II. Coarse Sun Sensors 


Sun sensors are most critical in LADEE’s safe mode control design as the spacecraft’s “attitude” is 
tracked relative to the sun vector S. A coarse sun sensor (CSS) is basically a photo-diode that returns a 
current I out in proportion to the cosine of the angle between the sensor bore sight and the sun vector S', 
which is approximated by the equation 

lout = K COS (0) , (1) 

found in the CSS datasheet, where 0 is the angle between the sensor’s bore sight and the sun vector, K is the 
peak current when pointed directly at the sun, i.e. 0 = 0. Therefore, one sensor does not provide an actual 
sun vector but rather a cone that the sun vector resides in. As each sensor has a limited field of view (FOV), 
in order to compute S accurately, the sun must be within the FOV of at least three sensors. Therefore, an 
array of multiple sun sensors is required to determine the sun vector in any spacecraft orientation. 

The LADEE design utilized 12 coarse sun sensors. Several CSS array arrangements were studied and 
evaluated based on how well they provide coverage over the entire spacecraft FOV, particularly when the 
spacecraft is oriented perpendicular to the sun vector. The calibration data supplied by manufacturer provide 
the value of K for each sensor, and by use of the cosine model of Eq. (1) the characterization of each sun 
sensor can be obtained. Therefore, the first step in processing the ith CSS data is to determine 0^ by solving 
Eq. (1) and we obtain 

4>i = cos- 1 (Iout'i/Ki) , i = 1, 2, . . . , 12 . (2) 

Next, let the unit sun vector S and the ith CSS bore sight unit vector Bi be defined as 
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Then, cos0^ can be considered as the inner product of the ith CSS bore sight vector with the sun vector, 
that is, 

$x 

cos 4>i = Bj S = [b x>i by,i b Z) i\ Sy ,i = 1,2, (3) 

. 

Now, determining the sun vector S from (3) is equivalent to solving the following standard least square 
minimization problem, 

min {|| BS — /i|| : for all \\S\\ = 1} , (4) 

where || • || denotes the vector norm, and 

B± cos 0i 

Bl COS 02 

B = , M = 

Bj J coscfri 

The unique solution to (4) is given by 

S=(B T B)~ 1 B T /i. (5) 

Several variants of the least square problems were experimented. For instance, the sun vector could be 
derived by using only the three brightest CSS readouts, or by using only those CSS readouts that were above 
a certain threshold. These results indicated that the sun vector estimation error was large, especially at 
higher 0 angle. In comparison, the proposed minimum least square approach (4) was found to produce a 
reasonably accurate sun vector estimate over the entire attitude sphere. 

III. Reaction Wheels 

Reaction wheels are commonly used for spacecraft attitude control. They are essentially a flywheel at- 
tached to a brush-less DC motor. As the motor accelerates the flywheel, an equal and opposite torque is 

3 of 15 


American Institute of Aeronautics and Astronautics 



applied to the spacecraft. Reaction wheels generally produce relatively small torques and are very control- 
lable, thus making them the ideal choice when fine pointing resolution is required. 

The LADEE spacecraft design uses four reaction wheels arranged in a four-sided pyramid configuration 
with base angle /?; as depicted in Figure 2, thus providing one redundancy. The base angle is chosen so that 
the resultant reaction wheel torques are mostly along the spacecraft’s Z-axis (where primary rotation will 
occur), while providing sufficient torque control authority in cross axes. 



Figure 2. Reaction wheel configuration in LADEE 


Let T be a 3 x 4 matrix that converts the axial reaction wheel vectors to the body fixed frame, 
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where ti represents the axial unit vector of the ith wheel about the body fixed frame. Therefore, the total 
reaction wheel angular momentum relative to the inertial frame, denoted as 1 H rw , is given by 

T H rw = TI rw T T T uj b + TI rw b u rw , (7) 

where T uj b is the angular velocity of spacecraft relative to the inertial frame, T the conversion matrix 
given in (6), I rw = diag{/i, J 2 , I 3 , I 4 }; Ii denotes the ith wheel axial moment of inertia, and b uj rw = 
[f 2 i, ^ 2 , ^ 3 , £Ll] T ; f \ denotes the ith wheel spin rate relative to the body fixed frame. 


IV. MEMS Rate Sensors 

There are several prominent MEMS technologies for measuring angular rate, but almost all of them work 
by inducing a vibration mode along one axis, then measuring the amplitude of the vibration that is induced 
around the measurement axis by the Coriolis force. The rate sensors utilized in LADEE’s safe mode were 
of the quartz tuning fork variety. 7 The four sensors were embedded inside each reaction wheel and aligned 
with its axial direction, therefore each sensor gave rate data about the reaction wheel spin axis. 

Since the MEMS sensors were arranged in the same pyramid configuration as the reaction wheels, the 
measured rate was overdetermined and therefore processed the same way the CSS data was processed. The 
spacecraft rotational rates were then extracted as follows, 
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where uj mi is the measured spacecraft rotational rate at ith wheel. Therefore, the spin rate 1 l J 3 can be 
obtained by performing the pseudo- inverse to the above and is given by 

V = (TT t )~ 1 T 1 ^ 171 . (9) 

The pyramid configuration also offers redundancy, allowing failure of one MEMS sensor. As long as the 
other sensors are functioning properly, three-axis rate measurement can still be derived. However, in this 
case, the spacecraft spin rate is derived from 

V = f(f T fy tI u m lt 

where T T is the sub-matrix formed by the rows of T t in (8) that correspond to the functioning sensors. 
It should be noted that, in actual implementation, the LADEE MEMS rate measurement Lj m . was filtered 
through a low-pass filter before it was fed back for control design. 


V. Spacecraft System Dynamics 


The angular momentum of the rigid body spacecraft in the inertial frame is given by 

1 H sp = J 1 uj b , (10) 

where J is the mass moment of inertia of the spacecraft, excluding the reaction wheels. Therefore, the total 
angular momentum for the spacecraft system is the summation of the reaction wheel angular momentum 
given in Eq. (7) and the spacecraft angular momentum given in Eq. (10), and it can be described by 8 

I H ss = I jjsp I jjrw 

= J V* + TI rw T TI co b + TI rw b Lo rw (11) 

= Jjcjh + TI rw b Ul rw 


where J a = J + TI rw T T . Note that in general the reaction wheel inertia is negligible compared to the 
spacecraft inertia, so in practice J a ~ J. 

Let r ext denote the total external disturbance torque, and by setting the time derivative of Eq. (11) equal 
to the external disturbance torque, we obtain 


Text 


d T H ss 



dt 


+ V x b H ss . 


Substituting Eq. (11) into above yields, 


( 12 ) 


Text = ( Ja I U) b + TI rw b U rw ) + 1 LU b X ( J a J U b + TI rw b U rw ) 


= ( J a L Cl b + X J a b UJ b ) + ( TI rw b UJ rW + 1 LO b X TI rw b UJ rW ) 


Spacecraft 


Reaction Wheels 


(13) 


Let u = [t x t v T z f be the internal control torque generated by the reaction wheels, then the equal and 
opposite torque will be applied to the spacecraft. Therefore, Eq. (13) can be rewritten as follows, 

j/ch 5 6 = J a V X T u) b + U + T ext 

where the control torque u is defined by 

u = - (TI rw b uj rw + ! uj b x TI rw b co rw ) 

= - ( Tr rw + / w 6 x Th rw ) 

where T rw and h rw denote respectively the reaction wheel torque and angular momentum along its axial 
direction. Eq. (14) represents the dynamics of the spacecraft subject to the control and disturbance inputs. 
This equation along with the sun vector dynamics, which will be discussed in the sequel, form a complete 


(14) 

(15) 
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equation of motion for spacecraft attitude control for the sun safe mode. The control torque u can be 
designed by following many available references, and once it is determined, we can solve Eq. (15) for both 
r rw and h rw , which then become the commanded input to the reaction wheels. In Section VI, we will discuss 
the development of sun safe mode controllers for various scenarios. 

As defined earlier, let S be the measured sun vector relative to the body fixed frame. Then, the time 
derivative of S relative to the inertial frame, denoted as -Jp, can be described by 


T dS 

dt 


b dS 

dt 


+ 7 u h x S , 


(16) 


where denotes the time rate change of the sun vector S relative to the body fixed frame. Since the sun 

vector stays almost stationary in the inertial frame, we deduce that « 0. Therefore, Eq. (16) can be 
simplified to 

-f — Vx -S. (17) 

which describes the sun vector dynamics relative to the body fixed frame. Note that the sun vector S 
is determined by processing the on-board sun sensor data as discussed in Section II, and the spacecraft 
rotational rate I uj b is obtained by processing the MEMS rate data as given in Eq. (9). As mentioned earlier, 
Eqs. (14) and (17) together completely describe the spacecraft attitude dynamics, and they are given as 
follows, 

E . I J a u = J a ux u + u / lg x 

' 1 S m -cox S [ J 


where, for brevity, we have used cu to represent the spacecraft spin rate 
disturbance term r ext . 


T u b 


and omitted the external 


VI. Design of Safe Mode Controllers 

The proposed sun safe mode control concept consists of three states: Initial safing, controlled roll- yaw, 
and eclipse. The detailed development of safe mode controllers and the proof for global asymptotic stability 
for the spacecraft system (18) can be found in Swei et al. 9 

A. Initial safing state 

The goal of the initial safing state is to ensure that any sun sensitive instrument p is protected from pointing 
directly at the sun and additionally, that the spacecraft attitude is oriented for peak power generation. 
Initially, let the sun sensitive instrument’s bore sight be pointed along the unit vector of B p . Upon entering 
the initial safing state, the spacecraft is commanded such that the sun vector S turns to — B p . This will 
ensure that the spacecraft always turns the sun vector away from the instrument p. Once the sun vector 
S is positioned within a certain tolerance of —B pi the safe mode will then transition into the controlled 
roll-yaw state. This design assumes that B p does not lie perpendicular to the Z-axis, and thus the desired 
roll-yaw about the sun vector will not violate any constraints. The initial safing controller is essentially a 
PD controller consisting of an inner rate loop which is commanded by an outer “attitude” loop, where the 
attitude error S e is calculated as the cross product of the target sun vector Sd and the measured sun vector 
5, that is 

S e = SxS d , (19) 

where both S and S d are unit vectors. If the spacecraft rotates about the error vector S e , then the sun 
vector S will be driven toward the target sun vector S d , hence the attitude error S e will be diminished. 

B. Controlled roll- yaw state 

When the sun vector gets within a certain tolerance of S d , the sun safe mode will then transition to the 
controlled roll-yaw state. In this state, the main control objective is to reach and maintain a specified 
inclination angle between the sun vector S and the spacecraft’s Z-axis. Additionally, the spacecraft is 
commanded to spin about its body Z-axis at for thermal control and to spin about acquired sun vector 
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Figure 3. Schematic block diagram for initial safing state 


S at uj s for momentum management. The Z- axis spin allows the heating effect from the sun to be evenly 
distributed, keeping all spacecraft components in the correct temperature range. The spin about £-axis 
decreases momentum build-up by allowing the lunar gravity gradient torques to act on the spacecraft in 
opposite directions over time. In fact, the momentum varies in a sinusoidal pattern as the spacecraft rotates. 

C. Eclipse state 

If, at any time, a minimum number of sun sensors reads zero current, then the safe mode control system 
asserts the eclipse flag and goes into the eclipse state. Since there is no CSS feedback at this state, the 
sun vector attitude loop is disabled. In order to minimize the RW control effort, the sun vector rotation 
command and Z-axis rate command become inactive. The control objective in this state is to conserve RW 
control authority by minimizing the interaction with the spacecraft dynamics, hence a simple rate feedback 
that cancels the gyroscopic effect induced by RWs is commanded. Therefore, the feedback-controlled system 
simply becomes the spacecraft rigid-body dynamics subject to external disturbance. Upon recovering from 
the eclipse state, if the spacecraft’s Z-axis is within the required tolerance of its set point, then the safe 
mode returns to the controlled roll-yaw state. However, if the Z-axis has drifted considerably, then the safe 
mode returns to the initial safing state. Note however, that during the eclipse state, the spacecraft angular 
momentum will slowly accumulate due to the presence of external disturbance torques such as lunar gravity 
gradient. A momentum management solution is not considered here, however it is required to maintain 
controllability of the spacecraft over extended time duration. 
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Figure 4. Schematic block diagram for eclipse state 


VII. Simulation Results 

The sun safe controllers outlined in the previous sections were implemented on the LADEE spacecraft 
model to demonstrate that the proposed controllers can be successfully executed at each sun safe state. For 
this purpose, spacecraft dynamics on a science orbit around the moon were simulated. The initial spacecraft 
body rates were assumed to be null, which is typical of an inertially fixed science operation. The initial 
reaction wheels speeds were set to those of a typical science orbit momentum state for the spacecraft, while 
the initial sun vector was chosen to be a reasonable angle off of the XY plane. In this simulation, a desired 
sun angle, roll rate and yaw rate uj s were chosen. 

As shown in Figure 5, it took about 130 seconds for spacecraft to reach the desired sun elevation angle, 
and the body rates converged to their set-points as shown in Figure 6, with the rate about the Z-axis 
remaining constant and the X and T-axis rates changing to keep a constant rotation about the sun vector. 
The roll- yaw controller was able to maintain the spacecraft Z-axis tilt very close to the set point, until an 
eclipse was detected 2000 seconds into the orbit. As evidenced in Figure 7, the eclipse state controller was 
simply to null the RW’s gyroscopic coupling with the spacecraft. The lunar gravity gradient torques were 
shown in Figure 8. As the spacecraft emerged from the eclipse at 4650 seconds, the nominal controlled 
roll-yaw behavior resumed as the sun vector elevation and body rates were again driven to their set points. 
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Body Rates Elevation Angle 


Sun Vector Elevation 



Figure 5. Simulated sun vector 


S/C Body Rates 



Figure 6. Simulated spacecraft body rates 
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Torque Reaction Wheel Rates 


Reaction Wheel Rates 



Figure 7. Simulated reaction wheel rotational rates 


Gravity Gradient Torque Body Frame 



Figure 8. Simulated lunar gravity gradient torques 
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VIII. Orbital Flight Data 


The LADEE spacecraft was launched on a Minotaur V vehicle on September 7, 2013 UTC. Upon initial 
separation from the launch vehicle, the spacecraft autonomously performed a number of housekeeping tasks, 
then transitioned command authority to its Safe Mode (SM) Controller. Implementation of the LADEE 
SM control was modified slightly during the actual flight missions. The number of CSS required by the 
flight software to be in view of the sun, before exiting the eclipse state, was changed from three to one. 
The rational behind this change was that in some rare attitudes, the external hardware/instruments on the 
spacecraft (thrusters, payloads, etc.) could cast a shadow over a sensor, which might trigger the SM control 
into the eclipse state. Although using only one or two sensors resulted in a degraded estimate of sun vector, 
this was deemed acceptable as the spacecraft would have enough insight to orient itself into a configuration 
that would illuminate more sensors and hence increase accuracy. If this change had not been made, the 
SM control would have entered the eclipse state more frequently, and at each such event the spacecraft 
would have to wait for a more favorable attitude before it could resume the science missions. Another minor 
modification was choosing the desired sun vector to be perpendicular to the spacecraft body Z-axis, instead 
of at +10°. Since the power generated from solar cells had proven to be sufficient with this new attitude, the 
change enabled simpler monitor and control of the sun vector dynamics. The final change in the LADEE 
SM control was the elimination of the initial safing state. This was a result of relaxed requirements from 
the payloads on-board the spacecraft. However, as demonstrated in the simulations, this control mode could 
still be useful for any future spacecraft. 

As shown in Figure 9, the initial transition from an uncontrolled tumble to a SM controlled attitude was 
drastic. Within minutes, the spacecraft was able to place the sun vector at its set elevation, and begin the 
Z-axis rotation. However, looking only at the sun vector measurement would not render any insight into 
the rotation about the sun vector. Figure 10 depicts the spacecraft body rates from MEMS measurement, 
which gives a clear picture of sun vector rotation. In this figure, the achieved body rates, when the SM 
controller was activated, can be observed to match the commanded rates about the Z-axis and sun vector 
fairly quickly. 


SMC Sun Vector 


u 

0 

> 



Time (hours) 


Figure 9. LADEE sun vector acquisition during startup 

In addition, a close examination of Figures 9 and 10 further reveals some interesting dynamical behaviors. 
First, it can be seen from Figure 9 that the distributed set of 12 CSS results in small spikes or ’jumps’ in 
the estimated sun vector. This is because, as the spacecraft rotates, the sun would enter and exit the field 
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Figure 10. LADEE body rates during startup 


of view of any particular CSS. Depending on the number of sensors in view, the SM control would update 
the estimate of sun vector relative to the spacecraft body axis. Although the effect seems small, it can 
be propagated through the body rate determination process, since changes in estimated attitude result in 
changes in reaction wheel commands, as evidenced in the small spikes in body rates shown in Figure 10. 
Furthermore, the effects of the reaction wheel’s jitter can also be observed in the MEMS measurements. The 
noise level measured by the MEMS is significantly larger before the activation of momentum management 
(reduction). Prior to momentum reduction, the effect of the sun vector jumps was indistinguishable from 
sensor noise, but it became very clear afterward. The momentum reduction was accomplished by firing RCS 
thrusters and the maximum wheel speed was reduced by about 75%. 

Once the LADEE spacecraft had acquired its nominal science orbit, the sun became eclipsed by the moon 
roughly every two hours. This meant that in the event the spacecraft entered safe mode, it would transition 
from the eclipse state to the controlled roll-yaw state on a regular basis. Figures 11 and 12 show the actual 
flight data from one such occurrence. As can be seen, the sun vector reads all zeros during the eclipse. 
However, once the sun illuminates the sensors, the controller is able to promptly re-orient the spacecraft, 
and the spacecraft begins to rotate at the set rates. 

It should be noted that, in addition to SM control, the LADEE spacecraft had a fine pointing control 
(FPC) system that utilized a star tracker for accurate attitude maneuver and was able to provide complete 
spacecraft attitude information. Therefore, as a way to validate the SM controller, the star tracker-FPC 
pair was used to estimate the sun vector, and the results were then compared with the estimate from the 
CSS-SMC pair. The two results were in good agreement, with the maximum difference less than ±2°. This 
validated the accuracy of the SM control. To lower the error even further, use of fine sun-sensors (as opposed 
to LADEE’s course sun-sensors) could be implemented. 

Additional LADEE lunar orbital data confirmed that the rotation about the sun vector in safe mode 
helped to properly manage momentum build up. As seen in Figure 13, over the course of an orbit, the 
spacecraft momentum followed a small sinusoidal pattern corresponding to the rotation of the spacecraft. 
Overall there was a slight total momentum accumulation. However, if there had been no rotation about 
the sun vector, the momentum would have accumulated much faster, requiring more frequent momentum 
reduction operations through the firing of RCS thrusters, and therefore would have consumed excessive 
propellant /fuel. 
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Figure 11. LADEE sun vector during eclipse exit 


SMC Body Rates at Eclipse Exit 



Figure 12. LADEE body rates during eclipse exit 
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Figure 13. LADEE Momentum Accumulation during Safe Mode 
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IX. Conclusions 


This paper presented the sun safe mode control design concept for LADEE. Three closely related sun 
safe states were defined and analyzed. The least square minimization technique was used to estimate the 
sun vector from CSS measured data, and the simulation results showed that this approach renders the sun 
vector estimation with much higher accuracy. The accuracy of sun vector tracking using CSS was further 
validated in actual flight through star tracker. In addition, the actual flight data indicated that during 
LADEE’s sun safe mode the proposed SM controllers were able to position the spacecraft at a desired sun 
vector and maintain a specific rotational rate about the Z-axis as well as the sun vector. 
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